Patrick McHardy 5d0aa2ccd4 netfilter: nf_conntrack: add support for "conntrack zones" ...

Normally, each connection needs a unique identity. Conntrack zones allow
to specify a numerical zone using the CT target, connections in different
zones can use the same identity.

Example:

iptables -t raw -A PREROUTING -i veth0 -j CT --zone 1
iptables -t raw -A OUTPUT -o veth1 -j CT --zone 1

Signed-off-by: Patrick McHardy <kaber@trash.net>

2010-02-15 18:13:33 +01:00

..

arp_tables.c

netfilter: xtables: add const qualifiers

2010-02-15 16:59:29 +01:00

arpt_mangle.c

…

arptable_filter.c

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

ip_queue.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6

2009-12-08 07:55:01 -08:00

ip_tables.c

netfilter: xtables: add const qualifiers

2010-02-15 16:59:29 +01:00

ipt_addrtype.c

…

ipt_ah.c

…

ipt_CLUSTERIP.c

netfiltr: ipt_CLUSTERIP: simplify seq_file codeA

2010-01-22 22:21:18 +01:00

ipt_ecn.c

netfilter: net/ipv[46]/netfilter: Move && and || to end of previous line

2009-11-23 23:17:06 +01:00

ipt_ECN.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

2009-12-09 19:43:33 -08:00

ipt_LOG.c

netfilter: net/ipv[46]/netfilter: Move && and || to end of previous line

2009-11-23 23:17:06 +01:00

ipt_MASQUERADE.c

netfilter: net/ipv[46]/netfilter: Move && and || to end of previous line

2009-11-23 23:17:06 +01:00

ipt_NETMAP.c

…

ipt_REDIRECT.c

…

ipt_REJECT.c

netfilter: net/ipv[46]/netfilter: Move && and || to end of previous line

2009-11-23 23:17:06 +01:00

ipt_ULOG.c

netfilter: xtables: constify args in compat copying functions

2010-02-15 16:59:28 +01:00

iptable_filter.c

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

iptable_mangle.c

netfilter: iptables: remove unused function arguments

2010-02-15 16:56:51 +01:00

iptable_raw.c

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

iptable_security.c

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

Kconfig

netfilter: Kconfig spelling fixes (trivial)

2009-03-16 15:17:23 +01:00

Makefile

netfilter: Combine ipt_ttl and ip6t_hl source

2009-02-18 18:39:31 +01:00

nf_conntrack_l3proto_ipv4_compat.c

netfilter: nf_conntrack: fix hash resizing with namespaces

2010-02-08 11:18:07 -08:00

nf_conntrack_l3proto_ipv4.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_conntrack_proto_icmp.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_defrag_ipv4.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_nat_amanda.c

…

nf_nat_core.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_nat_ftp.c

netfilter: nf_nat_ftp: remove (*mangle[]) array and functions, use %pI4

2010-01-11 11:49:51 +01:00

nf_nat_h323.c

…

nf_nat_helper.c

netfilter: nf_nat: support mangling a single TCP packet multiple times

2010-02-11 12:27:09 +01:00

nf_nat_irc.c

…

nf_nat_pptp.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_nat_proto_common.c

…

nf_nat_proto_dccp.c

…

nf_nat_proto_gre.c

…

nf_nat_proto_icmp.c

…

nf_nat_proto_sctp.c

netfilter: Fix extra semi-colon in skb_walk_frags() changes.

2009-06-09 18:05:28 -07:00

nf_nat_proto_tcp.c

…

nf_nat_proto_udp.c

…

nf_nat_proto_udplite.c

…

nf_nat_proto_unknown.c

…

nf_nat_rule.c

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

nf_nat_sip.c

netfilter: nf_nat_sip: add TCP support

2010-02-11 12:29:38 +01:00

nf_nat_snmp_basic.c

netfilter: SNMP NAT: correct the size argument to kzalloc

2010-01-04 15:21:31 +01:00

nf_nat_standalone.c

netfilter: net/ipv[46]/netfilter: Move && and || to end of previous line

2009-11-23 23:17:06 +01:00

nf_nat_tftp.c

…